New TEE.Fail Side-Channel Attack Extracts Secrets from Intel and AMD DDR5 Secure Enclaves
Researchers from Purdue University, Georgia Tech, and Synkhronix have created a side-channel attack known as TEE.These include AMD's Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP) and Ciphertext Hiding, and Intel's Software Guard eXtensions (SGX) and Trust Domain Extensions (TDX), which enable the extraction of secrets from the trusted execution environment (TEE) in a computer's main processor.
Fundamentally, the attack uses an interposition device that allows for the physical inspection of all memory transactions within a DDR5 server. It is constructed using readily available electronic equipment and costs less than $1,000.
According to an informational website, this enables us to extract cryptographic keys from AMD SEV-SNP and Intel TDX for the first time usin...